RM475057 - Microsoft Purview compliance portal: Insider Risk Management- DLP alerts as indicators

IRM admins can now select DLP alerts as indicators in IRM policies. IRM admins can select DLP policies that they would like to bring into IRM. By enabling this indicator, admins can detect if a user has alerts for the pre-selected DLP policies. When an IRM alert is generated, admin can see if there are any high-risk alerts for this user within DLP for the policies that are enabled as indicators. This feature will help admins view this information within IRM itself without having to switch to DLP.

Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies based on their own internal policies, governance, and organizational requirements. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy

GA date: May CY2025

Preview date: March CY2025